Docker Docker Certified Associate DCA Questions & Answers

• Question 161:

  Does this command display all the pods in the cluster that are labeled as 'env: development'? Solution: 'kubectl get pods --all-namespaces -I env=development'

  A. Yes

  B. No

  Correct Answer: A

• Question 162:

  Which of the following statements is true about secrets?

  A. Secrets can be created from any node in the cluster.

  B. Secrets can be modified after they are created.

  C. Secret are stored unencrypted on manager nodes.

  D. Secrets can be created using standard input (STDIN) and a file.

  Correct Answer: D

• Question 163:

  A company's security policy specifies that development and production containers must run on separate

  nodes in a given Swarm cluster.

  Can this be used to schedule containers to meet the security policy requirements?

  Solution: node taints

  A. Yes

  B. No

  Correct Answer: B

• Question 164:

  You have deployed a service to swarm. Which command uses the Docker CLI to set the number of tasks of the services to 5? (choose 2)

  A. 'docker service update --replicas=5 '

  B. 'docker replica update =5'

  C. 'docker update service =5'

  D. 'docker service replicas =5'

  E. 'docker service scale = 5''

  Correct Answer: AE

• Question 165:

  Wha is the purpose of Docker Content Trust?

  A. Signing and verification of image tags

  B. Enabling mutual TLS between the Docker client and server

  C. Docker registry TLS verification and encryption

  D. Indicating an image on Docker Hub is an official image

  Correct Answer: A

• Question 166:

  When using the Docker client to push an image to a registry, what environment variable is used to instruct the client to perform signing of the image?

  A. DOCKER_CONTENT_TRUST=1

  B. DOCKER_IMAGE_SIGN=1

  C. DOCKER_PUSH_SIGN=1

  D. NOTARY_ENABLE=1

  Correct Answer: A